$ rpki-client -vvf rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/323830313a38303a3734303a3a2f34382d3438203d3e20323633353638.roa File: 323830313a38303a3734303a3a2f34382d3438203d3e20323633353638.roa (raw, json) Hash identifier: qMXYhMp+LVYGti2NuSjxj10R7BA4s8v9jTtjkwNr9pg= Subject key identifier: D9:BB:24:BA:E5:0D:14:31:EB:AF:21:D2:91:67:B6:54:D0:F4:C6:DE Certificate issuer: /CN=354EA44B0BC0800AF1FC575B0A1061BA0BE35D84 Certificate serial: 4456A7A87D684596CB13A743E0B24750879F32E4 Authority key identifier: 35:4E:A4:4B:0B:C0:80:0A:F1:FC:57:5B:0A:10:61:BA:0B:E3:5D:84 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.cer Subject info access: rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/323830313a38303a3734303a3a2f34382d3438203d3e20323633353638.roa Signing time: Mon 13 Jan 2025 13:05:06 +0000 ROA not before: Mon 13 Jan 2025 13:00:06 +0000 ROA not after: Mon 12 Jan 2026 13:05:06 +0000 asID: 263568 IP address blocks: 2801:80:740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.crl rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 23 Apr 2025 11:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:56:a7:a8:7d:68:45:96:cb:13:a7:43:e0:b2:47:50:87:9f:32:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=354EA44B0BC0800AF1FC575B0A1061BA0BE35D84 Validity Not Before: Jan 13 13:00:06 2025 GMT Not After : Jan 12 13:05:06 2026 GMT Subject: CN=D9BB24BAE50D1431EBAF21D29167B654D0F4C6DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:2d:c9:45:e1:f0:d2:37:09:53:89:ce:99:a6: 30:28:03:72:fc:67:18:58:07:58:a7:5b:e3:e3:bb: 9b:af:de:ea:8f:a4:85:8d:9e:21:88:af:80:f7:23: ca:e1:fa:33:75:67:c4:a5:e8:02:96:c7:df:06:48: a6:14:c4:8c:a8:3e:66:b0:75:85:4a:53:75:75:ff: 56:c8:6f:05:4c:34:f3:27:34:b0:d7:5c:e6:06:aa: d8:53:39:db:6f:1b:f0:2d:5d:f0:46:f4:dd:85:88: cc:c9:67:fc:6e:33:c5:99:9f:27:5a:ad:4c:66:0c: e4:6a:a7:60:2e:90:4c:ac:40:55:5d:92:17:57:1e: 8c:a0:0f:78:d9:d9:9f:f5:b3:d3:6a:b9:cf:8a:8a: c9:23:71:43:9c:79:f2:26:10:a8:2d:1b:e3:77:e0: 9b:00:96:fd:8c:be:76:df:60:98:43:eb:cd:34:38: ea:ad:e5:3f:33:c6:d5:72:00:ce:a0:99:d3:1a:34: 4b:84:9f:7f:d1:83:98:ca:4a:44:b4:17:b1:77:73: 62:da:a4:de:a2:ac:8a:ae:92:e3:2b:aa:98:34:d1: a2:b5:54:df:fc:56:c7:d7:84:e9:68:be:91:b4:85: df:17:1d:f7:15:b2:fa:8a:dc:75:53:53:ca:7f:aa: 07:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BB:24:BA:E5:0D:14:31:EB:AF:21:D2:91:67:B6:54:D0:F4:C6:DE X509v3 Authority Key Identifier: keyid:35:4E:A4:4B:0B:C0:80:0A:F1:FC:57:5B:0A:10:61:BA:0B:E3:5D:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/323830313a38303a3734303a3a2f34382d3438203d3e20323633353638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:80:740::/48 Signature Algorithm: sha256WithRSAEncryption 40:ed:ad:a5:97:ca:41:3c:49:20:5a:d0:f2:5d:4e:29:89:72: 77:c3:59:36:18:52:ae:3a:a7:93:4e:29:ff:30:25:99:3d:44: 10:55:82:40:08:3f:56:38:54:dc:00:f5:4e:83:5d:86:3f:b9: 5b:c2:cf:a7:3f:4f:f2:53:7b:32:1d:d2:11:26:97:c9:f9:13: 1d:78:ac:96:01:08:0a:f1:3f:2c:af:0f:bf:7a:57:cc:a8:c2: de:1b:b8:b5:06:6a:6b:42:4b:17:0b:a2:ae:4e:2a:20:ae:ec: e8:46:80:1b:f7:cb:00:0f:dd:02:1d:f5:08:1d:27:0d:e4:d4: bb:b9:ef:5d:bf:7a:37:11:b8:45:b2:51:51:f1:e9:22:a7:e4: 3d:8e:ff:fd:1d:b6:9a:95:ea:f8:79:b9:52:ee:1e:da:db:10: e8:c9:38:a5:77:5a:99:fb:3c:a7:fd:2f:6e:95:1a:4e:be:59: 92:dc:d9:7a:e7:0a:7e:de:ec:d5:07:b0:1a:76:a5:ee:29:9e: 9c:bf:b0:1f:98:33:ac:d8:70:d0:f2:85:b4:b2:bc:81:2b:a5: a1:c3:42:59:0f:db:a6:b1:f7:a1:bc:1d:33:51:a4:29:fa:32: b0:ef:d0:cb:9e:c2:1a:84:1f:80:5b:67:71:fb:c8:33:1b:76: 74:35:f8:38 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIURFanqH1oRZbLE6dD4LJHUIefMuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU0RUE0NEIwQkMwODAwQUYxRkM1NzVCMEExMDYxQkEw QkUzNUQ4NDAeFw0yNTAxMTMxMzAwMDZaFw0yNjAxMTIxMzA1MDZaMDMxMTAvBgNV BAMTKEQ5QkIyNEJBRTUwRDE0MzFFQkFGMjFEMjkxNjdCNjU0RDBGNEM2REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7LclF4fDSNwlTic6ZpjAoA3L8 ZxhYB1inW+Pju5uv3uqPpIWNniGIr4D3I8rh+jN1Z8Sl6AKWx98GSKYUxIyoPmaw dYVKU3V1/1bIbwVMNPMnNLDXXOYGqthTOdtvG/AtXfBG9N2FiMzJZ/xuM8WZnyda rUxmDORqp2AukEysQFVdkhdXHoygD3jZ2Z/1s9Nquc+KiskjcUOcefImEKgtG+N3 4JsAlv2MvnbfYJhD6800OOqt5T8zxtVyAM6gmdMaNEuEn3/Rg5jKSkS0F7F3c2La pN6irIqukuMrqpg00aK1VN/8VsfXhOlovpG0hd8XHfcVsvqK3HVTU8p/qge9AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQU2bskuuUNFDHrryHSkWe2VND0xt4wHwYDVR0j BBgwFoAUNU6kSwvAgArx/FdbChBhugvjXYQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMldBNFE0RFFwOVl4REpucWQxQ1Z2QlJIVlFCaFZuRFBTbXBmalVDUDJF Z0svMC8zNTRFQTQ0QjBCQzA4MDBBRjFGQzU3NUIwQTEwNjFCQTBCRTM1RDg0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1NEVBNDRCMEJDMDgwMEFG MUZDNTc1QjBBMTA2MUJBMEJFMzVEODQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJXQTRRNERRcDlZeERKbnFkMUNWdkJSSFZRQmhWbkRQU21wZmpVQ1AyRWdLLzAv MzIzODMwMzEzYTM4MzAzYTM3MzQzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy MzYzMzM1MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBAIAHQDANBgkqhkiG9w0BAQsFAAOCAQEA QO2tpZfKQTxJIFrQ8l1OKYlyd8NZNhhSrjqnk04p/zAlmT1EEFWCQAg/VjhU3AD1 ToNdhj+5W8LPpz9P8lN7Mh3SESaXyfkTHXislgEICvE/LK8Pv3pXzKjC3hu4tQZq a0JLFwuirk4qIK7s6EaAG/fLAA/dAh31CB0nDeTUu7nvXb96NxG4RbJRUfHpIqfk PY7//R22mpXq+Hm5Uu4e2tsQ6Mk4pXdamfs8p/0vbpUaTr5ZktzZeucKft7s1Qew Gnal7imenL+wH5gzrNhw0PKFtLK8gSulocNCWQ/bprH3obwdM1GkKfoysO/Qy57C GoQfgFtncfvIMxt2dDX4OA== -----END CERTIFICATE-----Generated at Tue Apr 22 13:10:30 2025 by rpki-client